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SUMMARY 

A cooperative advanced digital research experiment (CADRE) was established by the National Aeronautics 
and Space Administration (NASA) and the Royal Aircraft Establishment (RAE), in which nonlinear control 
algorithms developed by the RAE were tested on the F-8C digital fly-by-wire (DFBW) aircraft based at the 
Oryden Flight Research Facility. In the initial phase of the collaboration, some variable-gain algorithms, 
referred to collectively as variable integral control to optimize response (VICTOR) algorithms, were flight 
tested. With VICTOR, various measures available within the control system are used to vary gains and time- 
constants within the closed loop and thereby enhance the control capability of the system, while reducing 
the adverse effects of sensor noise on the control surfaces. A review of design procedures for VICTOR and 
results of preliminary flight tests are presented. The F-8C aircraft is operated in the remotely augmented 
vehicle (RAV) mode, with the control laws implemented as FORTRAN programs on a ground-based computer. 

Pilot commands and sensor information are telemetered to the ground, where the data are processed to form 
surface comnands which are then telemetered back to the aircraft. The RAV mode represents a single-string 
(simplex) system and is therefore vulnerable to a hardover since comparison monitoring is not possible. 
Hence, extensive error checking is conducted on both the ground and airborne computers to prevent the 
development of potentially hazardous situations. Experience with the RAV monitoring and validation proce- 
dures is described. 


SYMBOLS 

DECL on-board pitch command, deg 

DEP pitch stick command, deg 

DERAV pitch downlink elevator command, deg 

DEUP pitch uplink elevator command, deg 

DRATE maximum floating limit draft rate, 2.5 deg/sec 

DYNP dynamic pressure, lb/ft 2 

G, closed-loop gain 

a 

Gq baseline proportional gain 

Gq v proportional gain 

G 3 baseline integral gain 

G. y integral gain 

K feed-forward gain 

a 

Mq normalized pitching moment derivative due to pitch rate 

normalized pitching moment derivative due to angle of attack 
M^ normalized pitching moment derivative due to elevator deflection 
Q,q pitch rate, deg/ sec 

q Q pilot pitch-rate demand, deg/sec 

q pitch acceleration, deg/sec 2 

s complex frequency variable 

T time delay 

V q VICTOR pitch-rate gain 


*Crown copyright subsists in Sec. 2 of this paper. 
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V e VICTOR integral pitch-rate gain 

z a negative of lift force due to angle of attack 

Z n negative of lift force due to elevator deflection 

a angle of attack, deg 

a angle-of-attack rate, deg/sec 

o VICTOR error threshold level 

second VICTOR error threshold 
e error 

c y error between pitch-rate response and pilot demand 
n elevator deflection from trim position 
n Q CADRE elevator comnand, deg 

x a lead-time constant for phase advance 

time-constant of noise filter and phase advance 
t Nv time-constant of noise filter 

t 2 time-constant of pilot's filter 

t VICTOR error lead-time constant 

t VICTOR error lag-time constant 


I. INTRODUCTION 

Following discussions in 1979 between RAE and NASA on collaboration in the fields of active control 
technology and handling qualities, a joint program of nonlinear control was established. In this program 
known as the cooperative advanced digital research experiment (CADRE), nonlinear flight-control techniques 
developed by RAE have been implemented and tested on the F-8C digital fly-by-wire (DFBW) research aircraft 
based at Ames Research Center's Dryden Flight Research Facility. 

The F- 8C DFBW aircraft is operated in the remotely augmented vehicle (RAV) mode (Ref. 1), in which 
control laws are implemented as FORTRAN programs on a ground-based computer; the control loop’from the 
pi ot and aircraft sensors to the actuators is completed by two-way telemetry. Since this represents a 
simplex system, extensive error checking is performed to prevent the development of potentially hazardous 
situations. Experience gained with the RAV monitoring and validation procedures is described in this paper. 

The control concept was initially developed by RAE. F. R. Gill, the principal RAE advocate of non- 
linear control concepts, has proposed several novel control concepts offering potential benefits in both 

control performance and handling qualities (Refs. 2-5). One of these concepts, the variable control to 
optimize response (VICTOR), has formed the basis of the initial stage of the collaboration. 

, fc O M/ th 0 !i 9h - the F : 8 S DF ?lni rcraft used for the fl1ght testin 9 is fitted with triplex on-board computers, 

the RAV mode is used for CADRE. Control laws are implemented in a high-level language (FORTRAN) on a 

ground-based computer, with the control loop from pilot inputs and aircraft sensors through the computer 
to the control actuators being completed by two-way telemetry (Fig. 1). The RAV mode is a simplex system 
and is therefore vulnerable to a hardover, since command voting or comparison is not possible. Hence, 
extensive error checking is carried out in both the ground and airborne computers and, if an error is 
detected, control is restored to the on-board system. Further details of the F-8C RAV flight-test tech- 
nique, including modifications introduced for the CADRE flights, are given in Sec. 3. 

With VICTOR, measures available within the control system are used to vary the gains within the 
Sf°, S pl r°nnJc to enhance the control capability of the system while reducing the adverse effects 

of sensor noise on the control actuators. The operation of VICTOR is illustrated in Fig. 2. Normally, as 
loop .9 ai " s increase, the control improves and the noise effects become greater. On the other 
f ^L 9 ! inS decrea J e » the noise effects decrease, but the control also becomes less effective. The 
*T ethl d tfns confllct b y allowing the gain to vary as a function of error signals within 

cne system, so that the gains increase when control is required as a result of pilot input or external 
isturbance, but are allowed to reduce to a much lower level once the control requirement has been satis- 
T h ? de * ign and operation of a variable-gain algorithm, known as VICTOR-E, implemented for a pitch- 
rate-to-elevator controller as part of CADRE, is described in Sec. 2. 

Initial flight tests of the variable-gain control laws cotmenced early in 1982; they are described in 
bee. 4. The principal aim of the flight tests was to establish whether a variable-gain controller could 
offer improved control performance over a linear baseline system, and whether any adverse handling problems 

1 !l?th d i!hf d c b Qr th ® rap l dly varying 9ain. The task chosen for this assessment was an air-to-air tracking 
tasK, witn tne h-ac aircraft required to track an accompanying chase aircraft through a pushover/pull-up 
maneuver. These tests have demonstrated that a variable-gain controller can be designed to give improved 
control performance while maintaining acceptable handling-qualities. In addition, the flight tests have 
shown that modifications introduced into the RAV system software for the CADRE tests have been successful 



3 


in allowing the assessment of the nonlinear control laws without undue restriction on the maneuver 
envelope of the aircraft. Finally, enhancements to the VICTOR control law and the introduction of other 
nonlinear control techniques into the CADRE program are discussed in the light of experience with the 
initial flights. 


2. DESIGN OF THE VARIABLE-GAIN CONTROLLER 1 

The general structure of the CADRE nonlinear pitch-rate controller is shown in Fig. 3. The controller 
consists of two parallel loops: a baseline loop with fixed gains to provide a datum; and a higher- 

bandwidth VICTOR loop, the contribution from which is governed by the variable-gain algorithm. This 
parallel structure of the VICTOR and baseline loops embodies part of the concept of class A/B control 
architecture (Refs. 6, 7). The class A system is that needed to keep the aircraft flying, and the class B 
system combines with A to provide high performance. In this case, when the system errors are small, the 
class B (VICTOR) gains are reduced to zero; but once a significant error caused by pilot demand or exter- 
nal disturbance is detected, the gains in the class B system are allowed to Increase rapidly to drive the 
error toward zero. 

The CADRE control laws were developed in two stages: the initial design of the baseline and nonlinear 
control laws by RAE (Refs. 8, 9), using a simplified model of the F-8C short-period dynamics; and the simu- 
lation and assessment of the control laws at Dryden using a full six-degree-of-freedom model of the air- 
craft, together with the introduction of modifications to the RAV system software needed to ensure flight 
safety (see Sec. 3). 

The first stage of the design was performed at RAE, using the computer-based control systems design 
package, TSIM (Refs. 10, 11). The major part of the design exercise was carried out using a continuous 
representation of the system, but a discrete implementation was also simulated and the characteristics 
checked as the design progressed. In addition, real-time engineer-in-the-loop simulations were used to 
check the system performance for a simple tracking task. Finally, the CADRE control laws were converted 
to difference-equation form and specified as a set of FORTRAN subroutines for the RAV ground computer. 

The CADRE control-law subroutines were then evaluated by NASA, and some modifications were introduced, as 
specified in Ref. 12. 

This paper includes a surimary of the principal design criteria and constraints, including the aircraft 
and actuator dynamics (Sec. 2.1), time delay (Sec. 2.2), and command prefilter (Sec. 2.3). The baseline 
system parameters are defined in Sec. 2.4, and the design of the VICTOR-E algorithm is discussed in 
Secs. 2.5 and 2.6. The final CADRE software includes eight combinations of parameters defining a range of 
control-law options; these are summarized in Sec. 2.7. The implementation of the control laws as FORTRAN 
subroutines is described in Sec. 2.8. 

2.1 Aircraft Model 

The pitch-rate controllers were designed for a fixed flight condition with a Mach number of 0.67 and 
an altitude of 6100 m. The short-period dynamics of the F-8C were modeled by linearized second-order 
equations of the form 


T 

it 

X M Tq- 
q a ^ 

+ 

r-i 

a 


1 Z a 

- 3JL _ 


1 


where q is pitch rate, a is angle of attack, and n is elevator deflection from trim position. 

The values of the normalized derivatives (such as M q and M ) were taken from the linearized six- 
degree-of-freedom data given in Ref. 13. 

The primary and secondary actuators were represented by the first- and second-order transfer functions. 
1/(1 + 0.08s) and 3969/ ( s 2 + 88s + 3969), respectively. 

As noted previously, an important effect of the F-8C RAV facility is the time delay introduced by the 
telemetry link hardware and the ground computer. In the early design stages the delay was represented by 
the continuous second-order approximation ' " 


-Ts _ 12 - 6Ts + T 2 s 2 
e ‘ l2"+ 6Ts + T 2 s 2 


where T is the delay time. 

A total delay of 50 msec was assumed for the system design, but the initial flight tests indicate 
that the total delay in the RAV mode is about 100 msec, which leads to some reduction in the damping of 
the systems (see Sec. 4). 

2.2 Command Prefilter and Feed-Forward 

The initial design goal for the system response to a pilot demand was that the pitch-rate response to 
a step input on the stick should be rapid and exhibit as small an overshoot as possible. Normally, if no 
prefilter is included, the aircraft zero causes a large overshoot in pitch-rate response to a step input. 

To alleviate this effect, a command prefilter of the form (1 + t 3 s )/(1 + T2S ) is introduced. For a second- 
order model, the aircraft zero time-constant t z is given, in terms of normalized derivatives, by 


l Crown copyright subsists in Sec. 2 of this paper. 
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M Z - 

a n 


M 


Z 

n a 


For the design flight condition, t 2 = 1.02. 

c^J he r V3lue 0f * he lead - t1me constant, T a , allows some control over the size of the pitch-rate over- 
^ \ w Ta = °* slmulations showed that the response was too slow for accurate tracking. On the 
?nnuo«hnJU aS *- a approaches , . T z * the la 9 1s effectively canceled, which leads to an increasing tendency 
thrSimh A l r ^°“ air Peking at long distance (=300 m) requires accurate control of pitch attitude Y 

tznt at pi respo " se ’ whereas when the target is close, height errors play a more impor- 

Th«; P ^: the task, and hence there is an increasing emphasis on faster normal acceleration response 

Therefore, the original dead-beat rate-response goal was changed for close tracking. Because of the 
inherent lag between pitch rate and normal acceleration response to an elevator input, more rapid normal 
^) eratl 0 n T reqUi r eS a V ncreased Pitch-rate overshoot, with a consequent increase in the lead-time con- 
stant, t a . Two values of i a were included as options in the final software specification (Ref. 12) 


r a = 0.2 for distant tracking (>150 m) 
- 0.6 for close tracking (<150 m) 


If no integral term is included in the control system, Gill (Ref. 
pilot demand with gain K a will lead to a steady-state error of zero! ror a secono-oroer a 
the feed-forward gain K a , of Fig. 4, can be expressed in terms of normalized derivatives as 


4) shows that a feed-forward of the 
For a second-order aircraft model, 


Z M - M 
a q a 

’'a Z M - MZ = 
an an 


K a = 


0.62 


f ii 9 ht condition. Although the baseline controller includes an integral term, which will 
its e lf act to reduce the steady-state error to zero, the integral acts relatively slowly, and it has been 
found advantageous to retain the feed-forward element. 

2.3 Baseline Loop Parameters 


The selection of the gain values, G q and G 9 , and the time-constant, -fj, is considered in detail in 


p p f „ j h p t - q “V" inwwniuia, t n , is considered in detail i 

“ *5 . d .£ e n ? ted that for convenience, the proportional and integral gains are scaled by a 
diHnnl^ln^h J he e'e^^r ef fecti veness , G a = 1/H n (which is equal to 0.087 at the design flight con- 
resierH„plWEi th ai t0t Th 9al " S for . th ? Proportional and integral loops are given by G a G q and G a G 9 , 
respectively (Fig. 4) The primary design criterion was to maintain a damping level of Ibout 0.5 on the 

elevatorT ! 7 'J 9 respo " Se s ? eed as ra P' d as possible and keeping noise effects on the 

elevator at a reasonable level. The values selected were as follows: 


Time-constant: 
Proportional gain: 
Integral gain: 


t^| = 0.033 sec 
G q = 3.6 
= 4.15 


2.4 Design of VICTOR-E Algorithm 

„nri 0 r D 7ni«t?n^® lir,e . I«r th ? StnJCtur ? and implementation of variable-gain control laws are currently 
under investigation at RAE. In particular. Gill has evolved several strategies for gain variation which 

erive tfie fun n henl? 1? Re I?* h 4 and 5 ‘ °" e featUre that stands out this worfls STt S 

Sion has h heen I 5 I f f h J gh * 9aln s y stem - the variable gain must be increased rapidly once the deci- 
V?2lOR FI ?h7 ad l^ at 9 ° ntr 7 1 / S reguired - Hence ’ the variable-gain algorithm described here 
iwitrh rnnlJ7i? 5*? rt 9 polnt I° r 93 1 n vanat1on in the VICTOR control loop is a straightforward on/off 
svstem 7s sw?trhnd b t n a 7 thresh0 ’ d - In other words, given an error e and a threshold level 5, the 

modi fTcat inns h * higher gain when £ ! i and is switched back to a lower gain when e < 5. Some 

VICTOR^? 7em^nrin5r?ns]^n UCed •? ^ h ' S c ^ teri ° n t0 r « d oce the effects of switching transients, but 
viuuK-t remains intrinsically a switching algorithm. 

To retain reasonable levels of damping, the higher gain of the VICTOR system must be associated with 

time e r^n<tantc W ) dt H*h In s ! n ^ e ' ]oo P VICTOR systems described by Gill (Refs. 4, 5), the noise filter 
time-constants (and hence the bandwidth of the system) are slaved to the gain variation. As noted earlier 
however, an important feature of the VICTOR-E implementation is the parallel structure (Fig 3) in which * 

^\har a th * le r,\\ are , c ° nfined to a separate ioop - ° ne ^tage 0 f i i? • a^Ai 

controlled th bandw J dth °f the VICTOR loop can remain fixed, with the contribution of this loop being 
controlled by the gain term alone, and, hence, the need for filter time-constant variation is removed. 9 

in A f VI( ; T0R control-loop includes variable proportional and '‘leaky" integral control 

C 1 i s fl V Xed ;£ a 5 e ad h an K e and n0i ! e fl ' lter elementS * The overal1 9 a ins are varied by means of 
VICTOR gearings V q and V 9 , which are in the range of 0 to 1 (for VICTOR-E, V„ is set eaual to Vo) and 

the maximum gains of the VICTOR loop are set by parameters G qv and G ev . FoAhe design case, the integral 
the baseYinl InniV 7? I- the proportional gain G qv is set to 3.6 (equal to the value of G q in 
b i7 set tn n P ni? 5 Th nIr e ' C °7 Stant ° f the noise filter and phase elements in the VICTOR loop advance, 
«Ucted f5r fl?ght (see Sec 1 " 2*7)” theS6 parameterS are > however - deluded in the eight systems 
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2.5 Operation of VICTOR-E 

The VICTOR-E algorithm operates by means of an error signal e v , which controls the V q gearing 
(0 < Vq < 1). To ensure that V q responds quickly to the pilot's stick movements, e v is based on the 
difference between the pitch-rate response q and the pilot demand qn. The error is then filtered and 
washed out to eliminate noise and steady-state components, finally yielding the VICTOR error e v , defined 
by 


(q - q D> 


Time-constant values of x, ■ 10 and x, = 0.05 have produced satisfactory control behavior, 
c e 

Initially, the VICTOR gearing was increased by switching Vq from 0 to 1 when the error threshold 6 was 
exceeded. To smooth out differences in control behavior experienced when pilot demand is close to the 
threshold, however, a second threshold, 5 lt was introduced so that when e v is increasing and 
6 < e v < <5 lf then Vq = (e v - 6)/(S 1 - <5). 

When the control demand has been satisfied and the error is reduced to a low level, the VICTOR algo- 
rithm must take account of this and reduce V q toward zero. Gill (Refs. 4, 5) finds that the response is 
sensitive to the rate of reduction of the gain, and that it is important to ensure that the gain is not 
reduced too rapidly. Hence, if c v is decreasing, the maximum value of V q is held until e v < 6, after 
which V q is reduced to zero linearly with time. A ramp decay time of 2 sec has proved to be suitable. 

The operation of the VICTOR-E algorithm is illustrated in Fig. 5, using the results from simulation 
studies for a 0.1-sec lagged-step pilot input of 1 deg/sec. It should be noted that in the example shown, 
e v does not reach a high enough level to force V q to its limiting value of unity. 

2.6 Parameter Combinations for Flight Tests 

Following simulation of the CADRE control laws at RAE and NASA, eight combinations of parameters were 
identified as possible candidates for flight testing. These eight functions can be commanded from a mode- 
panel on the ground; they allow the control law on the RAV system to be changed without leaving real time 
(see Sec. 3). The eight combinations comprise four basic systems, with two values of the lead-time con- 
stant on the pilot's prefilter, x a = 0.2 or 0.6, specified for each (see Sec. 2.3). The basic systems are 
as follows. 


1. Baseline: Here the proportional and integral gains in the VICTOR loop G qv , G ev are set to zero, 

leaving only the baseline loop in operation. Even though the VICTOR loop is ineffective, the gearing V q 
continues to vary and can be used as an indication of system performance (see Sec. 4). The baseline sys- 
tems are numbered 5 and 6 with x a = 0.2 and 0.6, respectively. 

2. VICTOR (design gain): For this case, the VICTOR proportional gain G qv is set at 3.6, with the 
integral gain Gg v again set at zero. This corresponds to the design case described in Ref. 9 and is 
intended to give an enhanced control performance over that of the baseline system. These systems are 
denoted by l and 2, corresponding to x a * 0.2 and 0.6, respectively. 

^3. VICTOR (half design gain): Here, G qv is set at 1.8, which represents half the design value of 

3.6. This, case was included to allow G qv to be increased progressively from zero to the design value. 
Systems 3 and 4 refer to this controller with x a = 0.2 and 0.6, respecti vely. 

4. VICTOR (emulation of baseline): For this case, the baseline system is degraded by halving the 

gains G q and G 9 and allowing the VICTOR gains G qv and Ga v to make up the deficit. The VICTOR noise 
filter time-constant x^y is reset to the baseline value x v . Systems 7 and 8 correspond to x a = 0.2 
and 0.6, respectively. 

2.7 Implementation of Control Laws in FORTRAN 

The control laws described previously in this section have been converted to difference-equation form 
and specified as a set of subroutines written in standard FORTRAN IV. One of the principal aims of the 
software design was to produce well -commented, easy-to-follow coding, to ensure that the programs comprised 
an exact definition of the computing task to be performed. The development of the difference equations 
used in the software is described in more detail in Refs. 14 and 15. The structure of the software is 
shown in Fig. 6. Different versions of the coding are given in Refs. 8, 9, and 12, but each version is 
referred to by a unique one- or two-letter identifier xx. With reference to Fig. 6, each version contains 
three subroutines: 


1. The initialization routine, QINIxx, is called once before engagement to set up the system param- 
eters (gains and filter coefficients, etc.) and to initialize the filters. 

2. The control program, QCONxx, takes in pitch rate and longitudinal stick position and generates an 
elevator demand signal. To minimize computing time delays from input to output, this routine performs 
only as much of each filter calculation as is needed to produce the output. 

3. The filter completion routine, QFILxx, completes the filter calculations ready for the next input 
sample. 
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3. RAV SYSTEM OVERVIEW 


The F-8C DFBW aircraft contains a triply redundant, full -authority, digital fly-by-wire flight- 
control system with provisions for accepting single-string (simplex) control-surface comnands from a 
ground-based computer while in a special remotely augmented vehicle (RAV) mode. This mode allows advanced 
control concepts, such as the CADRE control laws, to be programmed into the ground-based computer. The 
necessary data are transmitted to the ground and the computer commands are transmitted back to the air- 
craft, as shown earlier in Fig. 1. The RAV mode is selectable by the pilot. It is a single-string 
(simplex) system; therefore, if there is any failure, the system automatically switches or can be manu- 
ally switched back to the on-board digital SAS mode. The CADRE RAV mode allows implementation and 
changes to the CADRE control laws, which are written in FORTRAN, without disrupting the integrity of the 
on-board flight system. 


In addition to programming the control laws in the ground-based computer, the development and flight 
qualification of the CADRE system involved an effort in system development. Significant changes and 
improvements were required for the existing ground and airborne software. Ref. 1, for the CADRE proqram. 
Additional failure-detection and identification methods were required for maneuvering flight An effort 
was made from the start to develop a failure management strategy that would allow full elevator authority 
during maneuvering while allowing no failure in the F-8C RAV system to compromise either the fail- 
operational integrity of the triplex on-board systems, or the flight safety of the aircraft 


Monitoring command software was used for both the simulator testing and during flight. This allowed 
significant time saving during evaluation, verification, validation, and during flight testing. 

Although the rigorous flight qual ification standards developed in previous RAV experiments were used 
fhrInor i0nS W6re made 1R the testing tech niques and the procedures to meet the unique requirements of 


3.1 CADRE RAV System 


The CADRE RAV system involved mechanization and implementation of various ground and airborne hard- 
ware, as well as software interfaces. The primary elements of the hardware used in the F-8C RAV facility 
are shown in Fig. 7; they are divided between ground systems and airborne systems. 


The process starts with parameters being downlinked, including aircraft sensor signals and pilot 
commands. These signals are received at the telemetry- receiving station and are passed to a downlink 
telemetry computer which performs the required subframe decommutation and discrete processing of the down- 
link data. It also formats a data buffer for access by the control-law computer. The downlink data are 
then interfaced to the CADRE computational algorithms in the control-law computer. An additional computer 
ace ’ s t} own ^9* 7* is to an external mode-control box. This provides a flexible change to the 
CADRE control laws between the eight different control algorithms. 

The function of the CADRE control-law computer is first to compute the CADRE control algorithms 
Secondary functions are real-time input/output computation, fault detection, and ground preflight testinq. 

e program structure has two primary segments. One is a real-time segment which is synchronized to the 
uplink encoder and operates at an 18.75-msec frame rate. It contains all elements for the eight CADRE 

I? ; a "i^ nf I' Ura ^ 0 ; S ^ ?? 1C for \ swftchfng between control laws, and the set of failure detection and 
isolation algorithms that is discussed in Sec. 2. In addition, it contains the input and output routines 
required for the reformatting of the downlink and uplink parameters and the discrete interface to the mode- 
controi box. The other segment of the program structure is the non-real -time or background segment. All 
initialization functions and several display routines are processed in this segment. The display routines, 
which are formatted for a CRT terminal, were designed for ground checkout and testing. In addition, the 
CRT terminal interface allows selected control system parameters, for example, G qv , to be changed during 
flight, if desired. The display routines permit the easy monitoring of many of the hardware-to-software 
interface parameters, internal control variables and states, and failure detection functions. The ground 

m?n?mnm r H S nI t ” are h a pref1i 9 ht module that is divided into static checks and a maximum/ 

minimum dynamic check. The CADRE preflight is a monitor-only program; therefore, it can be used durinq 

displays deSired * Hard cop * es ma y be obtained of not only the preflight tests but of any of the CRT 


nn^J^ CADRE ,Q 0 ?c r0 * up1lnk coirmands are formatted as four 16-bit words of command information and 
J i?; 75 ‘ msec fr } m / rate - Ea c0 coimiand word contains 10 bits of proportional information; the 
Inn. a?fh w Iw a n?„ USed for dl f crete UP'*"* signals which provide for ground-commanded RAV disengage- 
IEp c! Pr0! T affl UP,ir T S the f0Ur WOrds ? itsh =omnard, volt -jonrond, voi ammd, and -Lr 

-OTrona, tne CADRE system only uses the pitch command. The uplink decoder outputs the four digital uplink 

the on hoard inst^menlanl^V 0 th ! °"* board f l’9ht-control system. The RAV cotrmands are also sent to 

U yst $? and transmltted via the downlink telemetry for monitoring in ground- 
tn $ hp C H du r ng . ’: 9ht ; The , CA0RE RAV system interface to the on-board flight system was designed 

f adrf RAv'mnd^d^d Pt ’ se - ectat> e mode ‘ SpecfaI care was taken to ensure that the operation of the 
did not compromise the overall redundancy management and failure strategies of the DFBW 
-r T ^ ere r2 re ’ the RAV on -board computer software mechanization included a series of logic 
discussed in P detIn n ?n t S« C °3 d r i ° nS f ° r ^ en9a9ement and disengagement of the CADRE RAV mode; these are 

sa ti i pd^hpfnr. lL P rln£ir S Dlv Cti 2 n 2 f the CADRE contro1 modes - a H the engagement conditions had to be 
dislnnanpd b Ind r^nf^° RE R ? V m °2 e be !i ame su1tab1e f o r flight testing. The CADRE system was autematically 
Tiffin J2. K bran ^ erred t0 the on-board SAS, if any of the disengage conditions appeared. 

Ind rn^Ind’r^ RAV spftware contained functions that provided transient-free mode engagement, 

mand t #i re !-° na ?- -I y ch ! ck f- The on-board computer software was also modified to include com- 

mand authont y floating limits and ultimate g limits. This allows full elevator authority for maneuvering 
flight, which was needed for CADRE flight-test evaluation, while providing additional on-board protection. 



The authority limits and rate-check thresholds were all chosen to ensure that aircraft transients were 
acceptable in the event of a worse-case hardover failure. 

3.2 Failure Detection and Identification 
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The CADRE experiment was designed using a single-string (simplex) RAV system; therefore, redundancy 
management algorithms commonly used for multiple systems were impossible. Although a previous RAV system 
had successfully been developed (Ref. 1), it was not a full -authority system and did not require some of 
the additional concepts developed for this program. The primary features of the CADRE RAV mode-failure- 
detection system are (1) continuous rate-check testing of the uplink and downlink signals every minor 
cycle by both the flight and ground computers; (2) inhibition of RAV engagement until certain criteria are 
satisfied for both computer systems; (3) a wrap test that compares the RAV uplink command with itself sent 
back on a downlink word; (4) use of a floating window command limiter in the flight computer; and 
(5) imposition of a g envelope boundary for RAV operation. If a hard failure is declared by either com- 
puter system, a RAV downmode automatically occurs whereby the RAV conmand is faded to the on-board command 
in 2 sec. The particular cause of the RAV downmode is immediately identified and displayed in real time 
for downmodes originating from the ground computer. Piloted action is required to activate the RAV fail- 
ure display code for RAV disconnects originating in the flight computer, and that information is then 
relayed to the flight controller. The failure detection tests and RAV limiting restrictions will now be 
discussed. 

Ground computer- There are 11 tests for failure monitoring: 


1. 

RAV engagement bias 

7. 

DECL downlink rate check 

2. 

DEUP rate check 

8. 

DERAV downlink rate check 

3. 

Stick/trim opposition 

9. 

DYNP downlink rate check 

4. 

Wrap test 

10. 

Downlink telemetry computer fail 

5. 

6. 

DEP downlink rate check 
Q downlink rate check 

11. 

CADRE control -law computer fail 


Failure identification is displayed in real time both on a strip chart and on a light display on the mode- 
control panel. Since the RAV mode is susceptible to data spikes caused by temporary loss of the telemetry 
signal, a hard failure is not declared unless a threshold has been exceeded for n or more consecutive 
iterations. Once a RAV downmode is commanded, the error must be reset before another RAV attempt is made. 
Each test will now be described. 

Before RAV engagement, the CADRE conmand is compared with the current SAS command. The difference 
between the two must be 5° or less, otherwise an engagement bias error is declared that inhibits the RAV 
mode from engagement. Any command difference less than 5° is added to the CADRE command which then forms 
the RAV uplink command (DEUP). This bias then becomes fixed upon a successful RAV engagement.. 

Rate-check testing is performed on the CADRE RAV uplink signals. If the command rate exceeds the 
rate-check limit, the current command is replaced with the previous one and a counter starts incrementing. 

As long as this condition exists the RAV command remains frozen until the counter limit is reached and a 
RAV downmode is declared. If the RAV command becomes less than the rate-check value before the counter 
limit is reached, the RAV command is allowed to update to the new value, and the counter is reset to zero. 

A test is performed that determines whether the trim conmand is in the same direction as the stick 
displacement. If the stick deflection exceeds the threshold, and a trim command is in opposition, a 
counter starts incrementing. When the counter limit is reached, a RAV downmode is declared. 

A wrap test performs a closed-loop check of the RAV uplink conmand with itself which is sent back on 
a downlink channel. If the difference between these signals exceeds a given tolerance, a counter starts 
incrementing. When the counter limit is reached, a RAV downmode is conmanded. 

The proportional downlink words are rate-checked in their raw PCM format form before they are converted 
to engineering units. If the rate of change exceeds the tolerance level, the previously passed signal 
replaces the current one and a counter starts incrementing. As long as this condition exists, the passed 
signal remains frozen until the counter reaches a limit, at which time a RAV downmode is commanded. If the 
input signal becomes less than the tolerance before the counter limit has been reached, the new signal will 
be passed through, and the counter will be reset to zero. 

The discrete downlink word is tested in a different way. For any discrete change to be recognized it 
must exist for at least three consecutive iterations; if not, the change is ignored, although no RAV down- 
mode will result. This logic produces a two-sample delay for all discrete changes. 

The downlink telemetry computer that first receives the downlink signals is tested in the following 
way. The computer expects to receive fresh downlink data at a rate of 200 sps, and when it does, a 
counter is incremented. If the counter fails to advance for five consecutive iterations, a RAV downmode 
is commanded. 

The control -law computer is tested for failures by use of an external hardware watchdog timer. Each 
time the real-time loop begins execution, a pulse is sent to a timer. Failure to receive another pulse 
within about 20 msec causes a time out and a RAV downmode will be commanded through hardware. 

Flight computer - There are 15 conditions that must be satisfied by the flight computer in order to 
engage the RAV mode and to stay in that mode. These conditions are as follows: 
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Not in SAS mode 

Surface rate check 

Not SAS and surface rate check 

Engage tolerance failed 

Flap- engage tolerance failed 

Flap rate check 

Not SAS and flap-rate check 

Surface and flap-rate check 


Not SAS, surface and flap-rate check 

Autopilot engaged 

Autopilot disconnect 

Sensor failed 

Uplink failed 

low-g limit exceeded 

High-g limit exceeded 


The display codes are accessible to the pilot upon his request to execute the RAV failure disdav code 
program. The major failure testing will now be discussed. 

oare/i? A !oh 9 fh! tolera " ce tast } s first performed. It looks at the current RAV uplink command and com- 
E!w e ? If"*" the °"-t>°ard command. They must be within 1° for this test to pass, otherwise a 

RAV inhibit error will be set to prevent an engagement. 

D .„ °? Ce J he m mode has been en 9 a 9 ed » th e command is rate checked. This test is similar to that of the 

tes \ w 51S h iS d T- in th ? gr ° Und COmputer * If the rate of chan 9 e of the RAV command exceeds 

uL{ S tK, ! e th ^ CU ^ ent RAV COmma " d replaced w1th the P^vious one until the counter reaches the limit of 3. 
When this situation occurs, a RAV downmode is declared from the airborne computer. 

A floating window command limiter was added to the airborne software for the CADRE RAV proqram as a 
final test to prevent an undetected hardover just below the rate check from coming through to the surface 
rInt C RA\/* Thl s J im ! ter ^ illustrated in Fig. 8. Initially, the window is centered at ±3° about the cur- 
tr?p< R tn ??™ iand V Cormand rates up t0 5 5 7 u ec are allowed within the 6 ° window. The window continuously 
Fv/lnt t ?i ta L Ce SJu red 0n i he -?^ V . comrnand » but 1S onl y allowed to drift at a maximum rate of 2.5°/sec 
Eventually, the RAV command will be rate-limited to the drift rate value until the command rate is 
decreased or reversed and the window is allowed to recenter as shown in the figure. A rate-limit signal 
is telemetered to the control room during the flight test whenever the RAV command is rate-limited. 

The floating limiter, in combination with the rate-check testing that is resident in the triply redun- 

ontrn?' S pr0 !! 1deS P^ection for a full -authori ty , single-string (simplex)" ground-based 

control system. However, because of other safety considerations, RAV operation at the outer airdane 

ai rhnrnp deemed unde ! ] r ? b1 e • Therefore, a g envelope limit for RAV operation was also added to the 
downmode will result?* 6 W6re Set 3t +5 a " d ' 2 9 ' S " If theSe ltmits are ««eded, an automatic RAV 

3.3 RAV Software Development 

Simulation- The CADRE control laws were developed by RAE and supplied to NASA DFRF The simulat-inn 
e.eiopments at NASA DFRF were performed in two principal stages. The first s?S involved dev™ men? 

Sir? k a ”: d, 9 1ta1 simulation of the CADRE system - a duplication of the system developedby RAE 

r«,?ir? P ? I d by -^ We ?® U ? ed c ° va1idate the simulation. This allowed for consistency checking between’ 
c1mblnIt?ons P o7)?ne?s ^ se?e 6 «ed XuU? 1 ^" 9 mod1f1cations t0 ind1vidual pp "T r °' W filters or 

np RU T h ® sai r°" d stage was the major simulation effort; it consisted of a CADRE simulation using the F-8C 
ai rcraft^i t7hp7l ln?i facl h ty (R '9- 9 >- The iron-bird simulation consists of a decorni ssioned F-8C 
fin ?It 0 f t flinht 7 J,MJEr.? q ri?k? nt: triplex Primary digital system; triplex analog computer bypass; a 

full set of flight actuators, triplex electrical buses with batteries; triplex hydraulic system- operable 

auxiliary aircraft systems; and operable cockpit instruments. yo system, operable 

face MSltlSns b ll d iiSS?I faC TL W ji!) 3 non ] inear simulation of the F-8C aerodynamics which uses actual sur- 
Tk? P??Ir?r? as 1 ? pu . ts ' I he RAV ground computers were used as elements of the total CADRE simulation 
W wl™\- ?i dow " , ’ nk ^r^re interfaces were simulated in the simulation computer, and the control 
laws were implemented on the same type of ground computer that was used during flight. 

qua 1 i f ?cation? b1 ^ faci1ity was the key element in the system verification, validation, and flight 

with verification- The CADRE software verification tests were designed to insure compliance 

7t? are spec ’ flcat i on - The verification process, which included element-by-element verification 
requ red written procedural descriptions and produced hard-copy test results. All dynamic elem?n!s fuch * 

“soInl« based o? ?h? d«iI2H ? ynam ! c environment, and responses were compared with independent computer 
executed* E«h test*!*? II™ d char aeten sties. All path combinations of the CADRE control laws were 

Ea S£ test was accompanied by a written verification test report that is under software control 
management. These reports contain descriptions of test, objective, setup, results, and conclusions? 

ence ?R7 P ll h 7™?pI?!7 are confi ? uration control policy was developed based on the previous RAV experi- 
d??crep?Icy Lol^n? Ind re?!? ]"? , “ ented govern the verification test requirements, software changes, 
discrepancy reporting and reconciliation, software manufacture and loading, and documentation requirements. 

Not only were written verification tests and results required, as discussed above but all Drooram 
tad"?S S b2 Wb^T so t fUS e cStSi n £Jrt?- Bef ° re the implementation pf a " y change", approval 

the CAMF ff ara?Id ? ??d t ™Ml? Zf ‘ iat I 0 "~ Th !! overa11 CADRE astern configuration testing was designed to qualify 
th? basic l ' 7 Sy I tems and t0 insure proper systera operation. The analysis and validation of 

to verlf? 1 o 1 n I , m ? Chan ’ 2 ? tl0n ln i tially used ^e iron-bird simulation. This facility was used 
pxtpn.ivp n-iip? r I Per o° n Tr°''law implementation through static and dynamic response tests and through 

the UDI i nk P Inrt t H^ e i- Tha RAV 9round com P uter was used as elements of the total simulation? and 

the uplink and downlink hardware interfaces were simulated. The RAV simulation ground and on-board 
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software interfaces were identical to those of the actual aircraft and ground facilities, and the software 
developed and validated in the CADRE system simulation was used during the CADRE flight operation. 

Qualification testing - A series of failure-mode demonstration tests was conducted to insure proper 
system response to any critical fault. These tests were first conducted on the F-8 iron-bird simulator, 
then a subset of these tests was repeated during aircraft/ground facility systems tests. In addition, an 
integrated closed-loop preflight of the total CADRE system was accomplished in which all CADRE input and 
output parameters were checked both statically and dynamically. As a final step in the flight qualifica- 
tion process, the RAV system operational parameters were monitored during a sequence of flight tests in 
which the CADRE control laws were operating open-loop. These open-loop monitoring flight tests verified 
RAV uplink and downlink communication links, telemetry signal strength, and the ground and aircraft syn- 
chronization strategies. 


4. FLIGHT TESTS 

Flight tests of the VICTOR variable-gain control laws commenced in February 1982. The main objective 
of the tests was to establish whether the variable-gain controller could offer improved control performance 
over that of a fixed-gain baseline system and whether any adverse handling problems were introduced by the 
rapidly varying gains. In addition, a comparison has also been made between the baseline controller and a 
variable-gain system, designed to reproduce, rather than improve, the performance of the baseline. The 
task used for this assessment has been an air-to-air tracking task, in which the F-8C pilot is required to 
track an accompanying chase aircraft through a pushover/pull-up maneuver. Details of the maneuver and 
other test procedures are given in Sec. 4.1. No direct measurement of the accuracy of tracking is avail- 
able, but indirect indications are obtained from recordings of the system activity and from pilot ratings 
of the different controllers. These results are presented in Sec. 4.2. 

The initial flight tests have highlighted the need for some enhancements of the current variable-gain 
control laws. Improvements planned include the provision of gain scheduling with dynamic pressure to widen 
the flight envelope, and the introduction of a rate-limiting term in the variable-gain logic to alleviate 
the effects of transient, rapid increases in gain, which can lead to the RAV rate limit being exceeded and 
to a consequent RAV downmode. Following this, it is proposed that three further concepts that have been 
studied at RAE be introduced into the CADRE control laws. These are (1) overshoot control (Re_f. 5), in 
which the damping properties of the control loop are adjusted during the response to prevent undesirable 
overshoots; (2) a nonlinear comnand prefilter (Ref. 16), which is designed to give good response for both 
target acquisition and tracking; and (3) the self-adaptive technique, INFAIR (Ref. 17), in which the param- 
eters of the comnand prefilter are adjusted to maintain invariant control response across the flight 
envelope. Some of these developments are discussed in Sec. 4.3. 

4.1 Test Procedure 

During the CADRE flight-test program, the F-8C takes off and climbs to the design conditions, normally 
Mach 0.6 and an altitude of 6100 m, with the on-board stability augmentation system (SAS) engaged in pitch, 
roll, and yaw. After trimming the aircraft, the pilot engages the RAV pitch mode, thus allowing the longi- 
tudinal control to be provided by the experimental CADRE control laws on the RAV ground computer. 

The initial tests included testing of the eight CADRE control modes and the longitudinal SAS mode 
under the following conditions: 

1. Nose-up and nose-down pitch pulses input by the pilot 

2. Steps input by ground control 

3. Rapid climb and descent between 5500 and 6700 m 

4. 3-g windup turn 

These tasks were used primarily to allow both the pilot and flight-test personnel to evaluate the 
control-law performance from a stability standpoint before the pilot rated its ability to perform the 
required task. 

The major part of the flight test has been devoted to an evaluation of the CADRE controller for an 
air-to-air tracking task in which the F-8C pilot attempts to track the accompanying chase aircraft through 
a maneuver. In this maneuver, the pilot of a target aircraft rolls into a stabilized 3-g turn while endeav- 
oring to keep the designed altitude and speed condition, but allowing altitude loss, if necessary. After 
turning 180°, the target pilot unloads the aircraft, reverses the direction of roll and pulls a stabilized 
3 g's in the opposite direction, again through 180°. A tracking distance of about 300 m has been used to 
allow assessment of low overshoot CADRE controllers 1, 3, 5, and 7. 

For this tracking task, the F-8C pilot was asked to assign a Cooper-Harper pilot rating (Ref. 18); 
this rating, as well as any other pilot comments on the system, was recorded. In general, the pilot was 
not told which CADRE controller was in operation. On the flight instruction card, the different control- 
lers were simply referred to as modes A, B, C, etc., with the relationship to the CADRE controllers 
(1 to 8) known only to the flight-test engineers. This enabled the inclusion of repeat points to estab- 
lish whether the pilot rating changed during the course of a flight. 

Although more complex tracking tasks have been attempted, they have usually led to a RAV downmode 
because of the elevator rate of g-limit checks. It is possible that the inclusion of a rate-limit con- 
troller and gain scheduling (Sec. 4.4) within the CADRE control laws will allow the more complex tracking 
tasks to be achieved. 
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4.2 Flight Results 

The initial flight tests concentrated on the tracking tasks described in Sec. 4.1, with the target 
aircraft at a range of about 300 m. The control laws that are designed for the task are modes 135 
and 7. For these modes the lead-time constant on the pilot's prefilter is set at 0.2, giving a relatively 
low overshoot (Sec. 2 3). The controller, with r a - 0.6 (cases 2. 4. 6, and 8). giving an overshoot in y 
pitch rate have also been flown for this task, but have usually been given lower ratings. A summary of 
the ratings of two pilots (pilots A and B) for the eight CADRE controllers defined in Sec. 2.7, together 
with the on-board SAS system, is given in Table 1. The ratings in the table are for two particular 

flights but they are representative of ratings assigned after all five flights to date. The SAS mode uses 

washed out pitch-rate feedback to improve the short-period damping; since it is implemented on the 
on-board system, no additional RAV time delay is involved. 

From Table 1, it can be seen that the pilots have consistently rated the mid-gain VICTOR system 
(mode 3) higher than the other CADRE controllers. Some basis for this rating can be found in Fig. 10 

where flight records for the tracking maneuver for case 5 (baseline) and case 3 are compared. First, from 

the pilot input traces of Fig. 10a, it can be ieen that the pilots were able to reproduce the maneuver 
very accurately, in that the variation of pitch-rate demand with time is virtually identical for the two 
modes. The low-amplitude, high-frequency bursts on the elevator demand signal for mode 3 of Fig. 10b 
show the influence of the VICTOR loop in widening the bandwidth of the controller. That the extra band- 
width is significant can be judged from the pilot ratings and a comparison of the VICTOR gearing (VO) time 
histories of Fig. 10c. The activity of the VICTOR gearing is a convenient measure of how well the control 
demand is being satisfied, since the gearing increases toward unity when the difference between demand and 
response exceeds a prescribed threshold. In the traces of Fig. 10c, the VICTOR gearing is below one for 

n 1 « H 2 r K at !!! P w, r ^ the ma ?? uver in case 3 than in case 5, indicating the greater degree of 

control afforded by the VICTOR controller. 


Further observations of the different controllers in the tracking task and pilot comments about them 
are summarized below. 

th li c«r tem ( ca J? 5) : Generally, the baseline pitch-rate controller was rated slightly better 

than the on-board SAS controller Control was precise and stable, but the initial response to a stick 
input was thought to be rather slow. The pilot rating was 4 to 5. 

vrrTDD* High-gain VICTOR system (case 1): Ther& were stability problems with the design case (case 1) of 

In particular the short-period mode was poorly damped and any attempt to use this controller for 
tracking led to a rate limit and a RAV downmode. The inadequate damping for this case was due to the time 
delay in flight, which has been estimated at about 100 msec. This was greater than the 50-msec delay used 
n* th w °^. gina i desi gn. It is anticipated that the performance of this controller will be improved by the 
introduction of rate, limit and overshoot control elements. These are discussed in Sec. 4.3 No Dilot 
ratings were given because of the stability problems. 

3. Mid-gain VICTOR system (case 3): In general, this controller was preferred for the tracking task, 

f C ™ t r°! k wlth at K 0St one oversho °t. A consistent pilot rating of 3 was obtained and flight 
?hp VAfnt iEfi vTr?no b f tWeen demand ar 4 re ? ponse was usually smaller than with the other systems, 

- It h *< VICT f J°w P Was actlve for less t1me (see Fig - 10 >- 0ne test ha * fa een performed 

with gain between the mid- and high-gain system, cases 3 and 1. Indications are that there is an improve- 
ent in pilot rating from 3 to 2 for small increments in maximum variable gain (G qv = 2.2). This may imply 
that an optimal value of G qv may be determined, given the present system. 9 J y 

l 4 * VICTOR emulation of baseline (case 7): The pilot rating for this case was similar to that for the 
baseline (case 5). Nevertheless, the pilots could detect a difference between the two controllers, in that 
WaS i° U9 ^ r° 91Ve leSS precise control > with slightly lower damping than the baseline. (In fact, 
thl s^Hf fp n Irth ases i 7 / nd V re th * same; tb ? refore ’ the perception of lower damping levels may be 
arp ni^nLn f Jth 241 the P1 rea 5 ts t0 the controller breaking out from the low-gain condition.) Flights 
are planned with different values of the threshold, which will give further information on this effect. 

at a rana2 y nf e MnHp^ h 4n tCh ’K a ^ e h OVer K h00t ^ cases 2 » 4 > 6 » and 8 ) : These systems were designed-for tracking 

th4 150 but have been assesse d in the 300-m tracking task. It can be seen from Table I 

mndp«; th PiinJVn^l ? S are il eSS conslstent and more adverse for their controllers than the low overshoot 
Pl ob comments wouldseem to show some influence of the time delay in that the systems appeared to 
ni w! ery cl U 6 reaction initially followed by a sudden rapid response which did not find favor with the 

Up iSht’rhAnnpc r 1 R9 : u thi S effect ma y not be so pronounced, since the task is governed by 
height changes which tend to lag the pitch-attitude changes. These will be evaluated in future fliqht 
tests, using a simulated refueling task. ULUre Tiignc 


5. FURTHER DEVELOPMENTS 

are rnn^rnp^with^*^ C ™ E . ^ntroll er to be introduced in the near future are described below. These 
are concerned with gain scheduling, rate-limit control, and the reduction of overshoots. 

5.1 Gain Scheduling 

nM^hnIpr/2M?i E n2 0 ?^J- erS Were desig P ed for a fixed fli 9 ht condition (Mach 0.67 at 6100 m). During the 
tionc 1 W J ho P r« 5 ’12 maneuver, the pilots experienced some difficulty in maintaining the design condi- 
P^PrJpnrpH tha M s Macb number increased or altitude decreased, some loss of stability was 

thP mp^nrpH C ° me thlS problem ’ the closed-loop gains are to be scheduled with the reciprocal of 

cfqh i C Pressure q, so that as altitude decreases or Mach number increases, the gains will 
tho4 6 h n i stab ’ 1n Y W1 ^ be restored. A scheduling relationship for the closed-loop gain G* 9 and for 
the feed-forward gain K a (Fig. 4), has been selected and is being incorporated in the CADRE software. 
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5.2 Rate-Limit Control 

One of the safety checks incorporated In the RAV system ensures that control reverts to the on-board 
system should the demand to the elevator exceed a certain rate (Sec. 3). This has proved a limiting factor 
in testing some of the CADRE controllers, particularly the high-gain VICTOR systems (1 and 2). Further 
design studies have shown that the high rate of change within the VICTOR loop is due mainly to the rapid 
increase in the gearing V q associated with an increase in control demand. In fact, the successful oper- 
ation of the variable-gain controller is not significantly affected by these high rates and hence a form 
of rate-limit control can be introduced with little or no performance penalty. In Ref. 19, several alter- 
native rate-limiting strategies are compared for both fixed- and variable-gain controllers. The schemes 
proposed are based on continuous representations of the control system and require an estimation of the 
extent to which the rate-limit is exceeded, so that the effective gain can be reduced by using an appro- 
feed !? ac * whenever rate limiting is imminent. However, for an implementation such as that used in 
CADRE, a relationship between the variable gearing V q and the demanded control rate exists 'so that the 
rate of control can be limited by adjusting V q directly. 

5.3 Overshoot Reduction 

A nonlinear technique for reducing the magnitude of response overshoots has been proposed recently 
(Ref. 5). It is based on the argument that when the control is reducing, the magnitude and rate of change 
of this error can be used to predict a possible overshoot. In such a case, an additional control term can 
be introduced to increase the effective damping. The dramatic effect of such a term is shown in Fig. 11 
where the technique is applied to the high-gain VICTOR system (case 1) with a time delay of 100 msec. It 
can be seen that the undesirable oscillatory response is much reduced, without a significant effect on the 
initial rate of response when the overshoot control term is introduced. It is expected that the influence 
of the time delay will be crucial in this application, with an effect not only on the damping of the sys- 
tem but also on the timing of the overshoot control term. Figure 11 also illustrates the effect of rate- 
limit control, with the onset of the overshoot control switch held back to ensure that the elevator demand 
rate does not exceed 50°/sec. 

5.4 F-8C RAV Facility 

One current constraint associated with the RAV facility is the time delay introduced by the telemetry 
communication with the ground-based computer. The RAV system mechanization for future programs will have 
significantly less delay. Improvements in the uplink hardware systems provide at least a tenfold increase 
in system bandwidth, as well as an uplink and downlink synchronization capability. These features will 
allow the RAV time delay to be reduced to a minimum. 


6. CONCLUDING REMARKS 


A major benefit of the NASA Dryden F-8C remotely augmented vehicle (RAV) facility is a reduction in 
the resources required to implement experimental control laws in the flight-test program, since the safe- 
guards built into the facility obviate the need to produce flight-critical, high-integrity software Fur- 
thermore, the control-law software is written in a high-level language (FORTRAN) and the structure and 
logic are, therefore, readily understood by the engineers and scientists working on the program. Addi- 
tional safeguards introduced to the RAV facility for the NASA/RAE CADRE program have proved very successful 
in widening the maneuver envelope of the aircraft, while maintaining a low level of uncorrcnanded reversions 
to the on-board system. 


The additional time delay associated with the current RAV facility did influence both the stability 
and handling assessment of the experimental control laws. Nevertheless, meaningful results can be obtained 
by comparing the behavior of different control laws when the time delay is present. 


The initial stage of the CADRE program has successfully illustrated the potential of variable-gain 
control laws, which allow the closed-loop gains to rise transiently to levels that would not be desirable 
for continuous operation owing to excessive noise-induced actuator activity. As a result of experience 
gained during the first stage of flight experiments, the introduction of improvements to the variable-gain 
future 3WS 3nd ^ lnc usion of further nonlinear techniques developed by RAE are planned in the near 
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TABLE 1. SUMMARY OF PILOT RATINGS FOR AIR-TO-AIR TRACKING TASK 


System 

Description 

Rating 

Pilot A 

Pilot B 

On board 

SAS 

Stability augmentation system; no 
time delay i 

5-6 

5 

Low overshoot controllers 

Basel ine 

CADRE baseline controller 

4 

5 

VICTOR 

High-gain variable-gain controller 

-- 

— 

VICTOR 

Mid-gain variable-gain controller 

3 

3 

VICTOR 

Variable-gain simulation of baseline 

4 

5 


Higher overshoot controllers 

Baseline 

CADRE baseline controller 

4 

7 

VICTOR 

High-gain variable-gain controller 

— 

-- 

VICTOR 

Mid-gain variable-gain controller 

4 

5 

VICTOR 

Variable-gain simulation of baseline 

4-5 

10 





VARIABLE GAIN RESOLVES 
CONFLICT BETWEEN CONTROL 



Fig. 1. F-8C DFBW RAV flight test technique. 


Fig. 2. VICTOR nonlinear control policy. 
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Fig. 3. General structure of RAE nonlinear pitch-rate controller, 
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BASELINE 



Fig. 4. Baseline plus VICTOR-E pitch-rate controller. 



Fig. 5. Operation of VICTOR-E algorithm. 
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RAV SUPPORT SOFTWARE 
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Fig. 6. Software structure for CADRE control laws. 
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Fig. 7. Primary hardware elements of RAV system. 
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RAV CMD OUT 

INNER WINDOW CMD RATE 



Fig. 8. F-8C DFBW floating RAV limiter. 
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Fig. 9. F-8C DFBW iron-bird simulation facility configured for RAV system testing 
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TIME 
10 sec 



(c) VICTOR GEARING 

(FLIGHT 114} 

CONTROL MODE: BASELINE. PILOT RATING (4) 

CONTROL MODE: MID-GAIN VICTOR. PILOT RATING (3) 

Fig. 10. Flight traces for baseline and mid-gain VICTOR systems. 
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Fig. 11. Effect of overshoot control. 
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